General

  • Target

    294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274

  • Size

    4.2MB

  • Sample

    220508-he2jbscehk

  • MD5

    b05cf3251a5b9fc46f0c540f7db5b37a

  • SHA1

    c2c3e89f168465cfbb4b62ad60e74de8557156ad

  • SHA256

    294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274

  • SHA512

    bd818b4ac8f36ff933aa138e5cc74cbe813735339d802a4c13afa8e4404f713a3bcf92d33c3de8fb8b91f814442ac6fd4d07817abae54fa7159bb65da2042709

Malware Config

Targets

    • Target

      294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274

    • Size

      4.2MB

    • MD5

      b05cf3251a5b9fc46f0c540f7db5b37a

    • SHA1

      c2c3e89f168465cfbb4b62ad60e74de8557156ad

    • SHA256

      294637e7938e0894842e502a1a5ffaf5922bbb8dac7a948e1ca02bf66279e274

    • SHA512

      bd818b4ac8f36ff933aa138e5cc74cbe813735339d802a4c13afa8e4404f713a3bcf92d33c3de8fb8b91f814442ac6fd4d07817abae54fa7159bb65da2042709

    • BlackRock

      BlackRock is an android banker based on Xerxes banking Trojan.

    • BlackRock Payload

    • Makes use of the framework's Accessibility service.

    • Acquires the wake lock.

    • Loads dropped Dex/Jar

      Runs executable file dropped to the device during analysis.

MITRE ATT&CK Matrix

Tasks